Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File:                     2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier:          6mGeXm9/o+LeX+9pxo2nCe7pxtbSiu4bO8+P708Dyo4=
Subject key identifier:   52:BA:B7:EA:4F:21:F2:A9:F5:BB:EA:B1:4C:E3:F1:DE:CD:5C:A3:29
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer:       /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial:       03AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number:          03A0
Signing time:             Sun 19 May 2024 02:35:31 +0000
Manifest this update:     Sun 19 May 2024 02:35:31 +0000
Manifest next update:     Sun 26 May 2024 02:35:31 +0000
Files and hashes:         1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: 55li5eNy1CglzpXE+VLZDhmFZgap5IIMkHac9Tr4WNE=)
                          2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /dWcySCBSA40/p7ZEddMfO9MmkVM6uS6LcL9k3LtIJk=)
                          3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: /afmQB3zM94nTq3/2oDWU9CHh0hD2dVbGgL+IHZt9os=)
                          4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: cJIwz/JsTDgsL3u8mdpUstTIr2TVgKDrX6Ae6kVf0Ps=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
                          rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
        Validity
            Not Before: May 19 02:35:31 2024 GMT
            Not After : May 26 02:35:31 2024 GMT
        Subject: CN=66496573-b66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:0a:b4:c5:c2:61:5d:16:2e:f6:e5:c3:df:
                    5b:e8:78:0c:15:5e:15:54:07:6e:1b:81:02:92:30:
                    b0:ff:4d:36:e9:2e:0f:2c:4b:62:96:ce:6b:67:ac:
                    29:39:77:cd:5a:9b:87:d5:1b:00:6e:a5:5d:27:30:
                    9c:f2:bd:e5:db:38:32:76:0b:e2:bd:d3:25:8b:dc:
                    7f:2d:e7:c5:06:52:4b:3a:15:0e:70:c3:41:5c:7d:
                    8c:21:d1:82:3c:55:60:1f:82:84:82:b7:78:97:0b:
                    0f:bf:cb:22:90:53:ce:13:0c:6e:28:ba:9f:98:a2:
                    e3:21:56:ab:05:9f:8e:6b:93:54:e7:13:1b:67:fd:
                    ab:5d:07:42:f7:1e:09:18:71:03:e4:d4:d1:8b:63:
                    a5:d8:e1:ca:f1:fd:ca:2d:9a:96:9f:63:e9:85:63:
                    82:63:a6:61:39:a0:5b:22:5d:84:ca:be:a2:bb:49:
                    9c:e0:e4:26:40:33:f5:07:e3:ec:dc:b2:9c:a8:c7:
                    95:de:b1:59:79:4c:be:f4:77:46:76:ea:3a:b6:4e:
                    fa:68:cb:4e:21:40:cf:7e:ad:1c:3f:9c:57:23:41:
                    49:dd:21:67:fc:3e:d8:bb:18:d5:5c:d5:74:ca:3c:
                    67:00:fe:68:ae:a7:46:ea:99:68:fe:72:aa:74:4f:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BA:B7:EA:4F:21:F2:A9:F5:BB:EA:B1:4C:E3:F1:DE:CD:5C:A3:29
            X509v3 Authority Key Identifier:
                keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:43:86:72:eb:ff:d1:c3:95:99:f1:df:7f:d8:6c:64:2e:66:
         9f:c4:45:e1:34:f3:18:50:2d:1f:13:ab:71:e7:3f:da:44:49:
         67:11:46:1c:9b:25:e3:e6:d6:45:41:9d:43:60:cb:d8:94:93:
         71:f7:bb:cd:48:93:c8:8a:2b:e9:dc:ac:53:c6:59:31:e8:31:
         1d:3d:d1:5c:29:04:f3:f3:d1:20:b8:be:54:c1:63:15:57:0e:
         e3:89:35:2c:41:9a:9c:91:23:15:40:13:14:27:d0:e7:cb:e5:
         7e:9a:2c:2d:d7:bf:c5:1c:bc:81:c5:40:10:8e:41:e8:43:cc:
         9b:c2:28:5a:44:c6:92:08:7e:9c:7c:e4:37:fe:98:b9:b3:1b:
         6e:1e:f7:27:1b:31:57:5f:68:39:31:fe:12:5b:09:40:c6:9f:
         2f:1f:65:52:b4:9f:e8:e8:6b:dd:70:5b:ad:ec:b4:70:79:14:
         89:c5:48:bc:99:5a:d3:3d:00:d0:51:3b:b3:8f:3f:02:ab:ba:
         a8:a5:1f:17:92:62:e0:10:59:c5:96:de:be:c9:ea:c9:3f:b1:
         6e:14:fe:eb:01:cf:67:8c:78:c1:bc:24:e0:bb:2b:3c:46:48:
         d2:a9:b5:e7:41:6e:2e:16:88:c0:3b:aa:4d:f9:af:45:93:63:
         a1:a7:46:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD
OERCMTNGNUUwHhcNMjQwNTE5MDIzNTMxWhcNMjQwNTI2MDIzNTMxWjAYMRYwFAYD
VQQDEw02NjQ5NjU3My1iNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0MkKtMXCYV0WLvblw99b6HgMFV4VVAduG4ECkjCw/0026S4PLEtils5rZ6wp
OXfNWpuH1RsAbqVdJzCc8r3l2zgydgvivdMli9x/LefFBlJLOhUOcMNBXH2MIdGC
PFVgH4KEgrd4lwsPv8sikFPOEwxuKLqfmKLjIVarBZ+Oa5NU5xMbZ/2rXQdC9x4J
GHED5NTRi2Ol2OHK8f3KLZqWn2PphWOCY6ZhOaBbIl2Eyr6iu0mc4OQmQDP1B+Ps
3LKcqMeV3rFZeUy+9HdGduo6tk76aMtOIUDPfq0cP5xXI0FJ3SFn/D7YuxjVXNV0
yjxnAP5orqdG6plo/nKqdE8SUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK6t+pP
IfKp9bvqsUzj8d7NXKMpMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG
OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh
NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUQ4Zy6//Rw5WZ8d9/2GxkLmafxEXhNPMYUC0fE6tx5z/aRElnEUYc
myXj5tZFQZ1DYMvYlJNx97vNSJPIiivp3KxTxlkx6DEdPdFcKQTz89EguL5UwWMV
Vw7jiTUsQZqckSMVQBMUJ9Dny+V+miwt17/FHLyBxUAQjkHoQ8ybwihaRMaSCH6c
fOQ3/pi5sxtuHvcnGzFXX2g5Mf4SWwlAxp8vH2VStJ/o6GvdcFut7LRweRSJxUi8
mVrTPQDQUTuzjz8Cq7qopR8XkmLgEFnFlt6+yerJP7FuFP7rAc9njHjBvCTguys8
RkjSqbXnQW4uFojAO6pN+a9Fk2Ohp0b8
-----END CERTIFICATE-----
Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org